AZL-113732
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-113732.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-113732
- Upstream
- CVE-2026-116328
- Published
- 2026-11-12T15:17:41Z
- Modified
- 2026-11-13T14:17:11Z
- Summary
- CVE-2026-116328 affecting package postgresql 16.15-1
- Details
-
Integer wraparound in PostgreSQL generation memory contexts allows a database user to execute arbitrary code as the operating system user running the database, via freeing an allocation larger than 1 GB and causing its block to be reused for smaller chunks whose back-pointer offset cannot represent that position. Within major versions 16-18, minor versions before PostgreSQL 18.7, 17.12, and 16.16 are affected. Versions before PostgreSQL 16 are unaffected.
- References